$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa File: f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa (raw, json) Hash identifier: xN5ippsP0AVi4D4MNPxAt2Z0n1kDkvf8rVuPoT78QxI= Subject key identifier: 03:C9:43:27:B1:A8:16:54:E7:7B:06:12:85:66:9B:8A:1C:96:93:1B Certificate issuer: /CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Certificate serial: 010D0C9F4328584F27F25B16D8A785BA3BF7F000 Authority key identifier: C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa Signing time: Sun 13 Sep 2026 01:00:12 +0000 ROA not before: Sun 13 Sep 2026 01:00:12 +0000 ROA not after: Sat 12 Dec 2026 02:00:12 +0000 asID: 401578 IP address blocks: 142.248.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:27:f2:5b:16:d8:a7:85:ba:3b:f7:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a123a5f1-e9e7-4d53-b615-f8afb17b29c5 Validity Not Before: Sep 13 01:00:12 2026 GMT Not After : Dec 12 02:00:12 2026 GMT Subject: CN=cfd0daa0-6106-49e2-8995-9cfae4564d37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:f0:63:d7:bb:c7:04:77:78:aa:cf:89:79: 33:01:cb:2e:24:26:69:40:9e:1e:74:f2:df:5e:b4: b8:88:c8:89:34:4b:a5:40:63:5d:05:e5:b2:bc:b3: ee:5f:34:cf:50:60:ea:95:84:3b:c3:9a:da:52:d9: 82:9a:02:ee:71:70:e4:42:b0:70:82:7d:dd:3f:50: 78:8e:29:48:a4:ff:7e:21:0d:13:26:fb:8a:1c:28: e5:b0:6e:a0:45:22:c8:66:57:b4:a9:4c:37:aa:05: c8:56:69:41:d6:98:89:94:7a:c2:99:21:9e:b1:94: 9e:32:ab:d8:94:96:76:c3:5a:92:2c:23:07:55:ca: 6c:7e:79:8d:e9:ee:0f:b4:28:67:69:ee:23:56:4c: b1:b1:65:ef:69:4e:c1:38:0c:5b:c3:dd:95:24:f0: c8:43:7f:20:4b:18:7d:d2:96:9d:89:d3:31:25:be: 69:ae:93:b6:ba:af:1b:89:95:51:75:2b:68:04:8a: 5b:b7:19:56:19:e4:5a:17:38:54:9d:0b:c7:59:b5: 19:d0:5a:64:4c:3a:6c:3d:81:7b:35:c8:b4:ff:c6: b7:0a:90:c1:80:8f:b1:ad:82:96:74:4f:1c:35:99: 67:f7:8e:e7:0f:87:d0:46:41:3b:0e:db:33:1b:9b: 2d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C9:43:27:B1:A8:16:54:E7:7B:06:12:85:66:9B:8A:1C:96:93:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/f0ebf702-303f-30ab-8bf1-48f5501b9afd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.crl X509v3 Authority Key Identifier: keyid:C9:6D:7C:45:E3:4D:69:A5:8D:F7:D2:D3:C2:BA:78:28:70:3C:4E:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a123a5f1-e9e7-4d53-b615-f8afb17b29c5.cer sbgp-ipAddrBlock: critical IPv4: 142.248.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:23:c2:1e:1b:43:6c:f9:9e:0c:af:9b:04:6f:3c:cf:de:34: b2:12:3f:8b:7c:e8:5e:94:3f:e4:cb:8f:29:35:26:29:55:e9: 59:bb:aa:a5:b7:16:c9:7a:98:db:1b:ef:a0:8a:93:f9:29:ba: ff:2f:26:5d:cb:35:b8:b3:db:69:e2:5f:f1:ff:b9:de:2e:08: 0c:ae:e7:67:5b:4c:c4:5f:f4:73:ac:79:78:72:9b:58:df:f4: b9:ea:f0:0e:73:55:b7:bf:33:ab:51:f0:2c:e7:e4:3e:90:01: 1a:30:ff:53:10:e6:7c:16:f0:5d:dc:ad:ec:ff:d7:e0:e5:7e: 51:f1:80:56:37:1f:30:5a:2c:6b:e2:6c:08:14:8f:1b:25:80: 93:a3:3d:e4:69:90:70:b6:ce:e5:8e:03:be:35:34:a7:c3:89: ae:f9:f3:01:1b:a4:c8:f1:11:df:ba:3c:2a:ac:78:da:f5:fb: a0:0c:8f:2a:66:c2:82:62:97:71:f6:77:b7:6a:6b:9a:5d:80: f0:9b:af:02:e4:a5:c7:90:2d:11:74:32:0a:7e:61:4b:46:8b: 9d:d2:ef:63:7d:16:da:d2:69:40:87:e3:fe:6b:d8:bc:da:1d: 58:51:2d:b9:d0:66:f2:6d:36:50:c8:58:77:75:60:cd:de:fd: f7:9d:8e:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8n8lsW2KeFujv38AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyM2E1ZjEtZTllNy00ZDUzLWI2MTUtZjhhZmIxN2Iy OWM1MB4XDTI2MDkxMzAxMDAxMloXDTI2MTIxMjAyMDAxMlowLzEtMCsGA1UEAxMk Y2ZkMGRhYTAtNjEwNi00OWUyLTg5OTUtOWNmYWU0NTY0ZDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqPwY9e7xwR3eKrPiXkzAcsuJCZpQJ4edPLf XrS4iMiJNEulQGNdBeWyvLPuXzTPUGDqlYQ7w5raUtmCmgLucXDkQrBwgn3dP1B4 jilIpP9+IQ0TJvuKHCjlsG6gRSLIZle0qUw3qgXIVmlB1piJlHrCmSGesZSeMqvY lJZ2w1qSLCMHVcpsfnmN6e4PtChnae4jVkyxsWXvaU7BOAxbw92VJPDIQ38gSxh9 0padidMxJb5prpO2uq8biZVRdStoBIpbtxlWGeRaFzhUnQvHWbUZ0FpkTDpsPYF7 Nci0/8a3CpDBgI+xrYKWdE8cNZln947nD4fQRkE7DtszG5st4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPJQyexqBZU53sGEoVmm4oclpMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMTIz YTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFmYjE3YjI5YzUvZjBlYmY3MDItMzAzZi0z MGFiLThiZjEtNDhmNTUwMWI5YWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTEyM2E1ZjEtZTllNy00ZDUzLWI2 MTUtZjhhZmIxN2IyOWM1L2ExMjNhNWYxLWU5ZTctNGQ1My1iNjE1LWY4YWZiMTdi MjljNS5jcmwwHwYDVR0jBBgwFoAUyW18ReNNaaWN99LTwrp4KHA8TlgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMTIzYTVmMS1lOWU3LTRkNTMtYjYxNS1mOGFm YjE3YjI5YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjvgmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIojwh4bQ2z5ngyvmwRvPM/eNLISP4t86F6UP+TLjyk1JilV6Vm7qqW3 Fsl6mNsb76CKk/kpuv8vJl3LNbiz22niX/H/ud4uCAyu52dbTMRf9HOseXhym1jf 9Lnq8A5zVbe/M6tR8Czn5D6QARow/1MQ5nwW8F3crez/1+DlflHxgFY3HzBaLGvi bAgUjxslgJOjPeRpkHC2zuWOA741NKfDia758wEbpMjxEd+6PCqseNr1+6AMjypm woJil3H2d7dqa5pdgPCbrwLkpceQLRF0Mgp+YUtGi53S72N9FtrSaUCH4/5r2Lza HVhRLbnQZvJtNlDIWHd1YM3e/fedjis= -----END CERTIFICATE-----Generated at Thu Sep 24 07:51:54 2026 by rpki-client